Privacy disclaimer

Privacy Policy for Users

mWeb Online - with registered office at De Nieuwe Erven 3, 5431NV Cuijk, The Netherlands (hereinafter, 'Owner'), owner of this website (hereinafter, the 'Website"), as owner of the processing of personal data of users browsing the Site and participating in the prize event accessible from the Site (hereinafter, the "Users") hereby provides the privacy policy pursuant to Article 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter, " Regulation " o " Applicable Legislation").

This Site and the prize event accessible from the Site are reserved for subjects who have reached the age of eighteen. The Owner therefore does not collect personal data relating to subjects under the age of 18. At the request of Users, the Owner will promptly delete all personal data involuntarily collected relating to subjects under the age of 18.

The Data Controller takes the right to privacy and the protection of its Users' personal data into the utmost consideration. For any information in relation to this privacy policy, Users may contact the Controller at any time, using the following methods:

By sending a registered letter with return receipt to the registered office of the Holder: De Nieuwe Erven 3, 5431NV Cuijk, The Netherlands

You can contact the Data Protection Officer (DPO) by writing to [email protected].

MARKETING SERVICE PROVIDERS:

We will share your data with the Marketing Service Providers listed below, who will use it for a variety of direct marketing, targeted advertising, measurement and identity resolution purposes. Marketing Service Providers perform data profiling. They will combine your data with data they obtain from other sources (including public sources) and use it to create 'predictive models'. Marketing Service Providers use these models to try to predict behaviour and preferences (e.g. how likely you are to buy a holiday online or take a particular type of holiday) or likely circumstances (e.g. whether you are eligible for a particular credit card).

Marketing service providers will also try to match and then link your data with data they receive about you from other sources, to ensure that the data they hold about you is correct (e.g. to check whether you have recently moved address).

help organisations better understand the likely characteristics of their customers (and find others like them);
improve the relevance and appropriateness of an organisation's marketing to its customers (e.g. offers, products and services); and
help them communicate with their customers more effectively offline and online. This can mean that you receive tailored advertising via direct mail, e-mail or when you visit a website.

To learn more about the use of your data by marketing service providers and to find out how to exercise your data protection rights in relation to their use of your data (including how to withhold consent), click on the websites of the company below:

Massive Ads Digital
7 Armadale Court, Reading, Berkshire, England, RG30 2DF ICO number: ZA186377
https://www.massiveadsdigital.com/

News Webcenter (mWeb Online)
De Nieuwe Erven 3
5431NV Cuijk
The Netherlands

Purpose of processing

Users' personal data will be lawfully processed by the Controller in accordance with Article 6 of the Regulation for the following purposes:

contractual obligations:
to implement the rules, which is accepted by the User during registration for the same; to fulfil specific requests of the User. The User's data collected by the Controller for the purposes of eventual participation include: gender, first name, surname, date of birth, postal address, email address and telephone number, as well as any personal information that the User may have voluntarily published. Unless the User gives the Data Controller a specific and optional consent to the processing of his/her data for marketing purposes pursuant to paragraph 2 below or for communication to third parties pursuant to paragraph 3 below, the aforementioned data shall be used by the Data Controller for the exclusive purpose of ascertaining the identity of the User (also by validating the e-mail address), thus avoiding possible fraud or abuse and contacting the User for service reasons only, notifying any winnings and managing the prize allocation and delivery phase; contacting the User to obtain additional data and information - such as a copy of an identity document - that may be requested by the notary and the Chamber of Commerce official responsible for prize competitions, in order to ascertain the User's identity and avoid possible fraud and abuse; and to carry out any urgent communications by telephone during the prize collection and delivery phase);
in addition, to enable proper navigation of the Site by the User The Data Controller will collect all the personal data whose transmission is implicit in the use of Internet communication protocols, which the computer systems and software procedures used to operate the Site acquire during their normal operation: IP addresses or domain names of the computers used by Users, URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the User's operating system and computer environment.) and other parameters relating to the User's operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to allow it to function correctly. Without prejudice to what is provided for elsewhere in this privacy policy, under no circumstances will the Data Controller make Users' personal data accessible to other Users and/or third parties.
administrative-accounting purposes:or to carry out activities of an organisational, administrative, financial and accounting nature, such as internal organisational activities and activities functional to the fulfilment of contractual and pre-contractual obligations;
legal obligations: or to fulfil obligations provided for by law, regulation or European legislation (e.g. tax legislation; legislation on prize competitions - Presidential Decree 430/2001).

The provision of personal data for the above-mentioned processing purposes is optional but necessary, since failure to provide such data will make it impossible for the User to take advantage of the services offered by the Owner on the Site and to participate in the prize event.

Further processing purposes: marketing (sending of advertising material, direct sales and commercial communication)

With the free and optional consent of the User, some of the User's personal data (i.e. gender, first name, last name, date of birth, postal address, email address and telephone number) may also be processed by the Controller for marketing purposes (sending of advertising material, direct sales and commercial communications), i.e. so that the Controller may contact the User by post, email, telephone (fixed and/or mobile, with automated call or call communication systems with and/or without the intervention of an operator) and/or SMS and/or (with free and optional consent the User requested through his/her browser) push notifications and/or through social marketing campaigns (e.g. facebook) in order to propose to the User the purchase of products and/or services offered by the same Controller and/or third party companies, to present offers, promotions and commercial opportunities.

If consent is not given, the possibility of entering the competition will not be affected in any way.

In the event of consent, the User may revoke it at any time by making a request to the Controller in the manner indicated in paragraph 6 below.

The User may also easily object to further promotional communications by email by clicking on the appropriate link for revocation of consent, which is present in each promotional email. Once consent has been withdrawn, the Controller will send the User an email confirming that consent has been withdrawn. If the User intends to revoke his/her consent to the sending of promotional communications by telephone while continuing to receive promotional communications by email, or vice versa, please send a request to the Controller in the manner indicated in paragraph 6 below.

In particular, the User may revoke his or her consent to the sending of push notifications via the settings of his or her browser relating to the sending of notifications.

The Data Controller informs that, following the exercise of the right to object to the sending of promotional communications by email, it is possible that, for technical and operational reasons (e.g. formation of contact lists already completed shortly before the receipt by the Data Controller of the request for objection) the User may continue to receive some further promotional messages. Should the User continue to receive promotional messages after 24 hours have elapsed from the exercise of the right to object, please report the problem to the Controller, using the contacts indicated in paragraph 6 below.

Further processing purposes: communication of data to the Controller's Partners

With the free and optional consent of the User, the User's personal data (i.e. gender, first name, last name, postal address, e-mail address, telephone number) will be communicated by the Controller to the following categories of third-party companies:

telecommunications, fixed and mobile telephony companies (including Vodafone Italia Spa)
companies active in publishing, print media, new media and television (pay-TV)
companies active in e-commerce of products and services
companies operating in the utilities sector - gas, electricity, water, photovoltaics and water purification
companies operating in the tourism - tour operators, travel and transport agencies - and leisure sector
companies involved in vocational and/or educational training
advertising and marketing agencies, media centres, market research and contact centres
companies engaged in the production and/or trade of consumer goods: food and beverages, non-food groceries, cosmetics and health, clothing, semi-durable goods
NGOs and NPOs, non-profit organisations, foundations
companies operating in the betting and lotteries sector (with an aams licence)
companies operating in the automotive sector
companies operating in the financial, banking and insurance sectors
Pharmacies - Pharmacy2U
employment agencies and recruitment companies

ID protection: prevent others from misusing user details. Such information may relate to ID validation for anti-money laundering, anti-fraud, crime prevention, asset recovery, debt collection and reuniting people with unclaimed assets.

Advertisement: propose relevant offers to the user. This information may concern data analysis, matching, profiling and predicting behaviour so that the user can receive advertising material that is more relevant to him or her.

(collectively, the " Partners of the Owner ").

The Data Controller's Partners, as autonomous data controllers, will process the User's personal data for their own marketing purposes (direct sales, sending of advertising material and commercial communications), and may contact the User by post, email, telephone (fixed and/or mobile, with automated call or call communication systems with and/or without the intervention of an operator) and/or sms and/or through social marketing campaigns (e.g. facebook) in order to propose to the User the purchase of products and/or services offered by the same and/or other companies and to present to the User offers, promotions and commercial opportunities. Once the transfer has taken place, it will be the responsibility of the Data Controller's Partner to provide Users with all the information provided for in Article 14 c.3 of the Regulation.

If consent is not given, the possibility of registering for the prize competition will not be affected in any way.

In the event of consent, the User may revoke it at any time by making a request to the Controller in the manner indicated in paragraph 6 below.

The Data Controller informs that the User's personal data will be processed by the Data Controller's Partners as autonomous data controllers, on the basis of the specific notice that will be issued by the Data Controller's Partners to the Users pursuant to Article 14 c.3 of the Regulations. Any requests not to receive further commercial communications from the Controller's Partners, to whom the data have already been communicated by the Controller, must therefore be addressed directly to the latter.

Processing methods and data retention periods

The Data Controller will process the Users' personal data by means of manual and computerised tools, with logics strictly related to the purposes themselves and, in any case, in such a way as to guarantee the security and confidentiality of the data.

In the cases referred to in paragraph 1 above, the personal data of the Users of the Site shall be kept for the time strictly necessary to fulfil the primary purposes related to the User's participation in the contest or, in any case, for the time necessary to protect the interests of both the Users and the Data Controller in civil proceedings, and therefore for a period of time between 5 and, in the event of litigation, 10 years.

In the cases referred to in paragraphs 2 and 3 above, the personal data of the Users shall be retained by the Controller for the time strictly necessary to fulfil the purposes illustrated therein and, in any case, for no longer than twenty-four (24) months from the time of collection and/or receipt of such data. Exceptionally, personal data intended for the Controller's Partners belonging to categories i) telecommunication, fixed and mobile telephone companies; ii) companies active in publishing, print media, new media and television (pay-tv); iii) companies operating in the utilities sector - gas, electricity, water, photovoltaics and water purificationreferred to in paragraph 3 above, shall be retained by the Controller, by virtue of the specific type of products and services offered by them and taking into account the assessments made with regard to data retention, for no more than forty-eight (48) months.

The period of data retention by the Controller's Partners can be found in the information provided by the User pursuant to Article 14 of the Regulation.

Scope of data communication and dissemination

The personal data of Users may be disclosed to the employees and/or collaborators of the Data Controller appointed to manage the Site. These subjects, who have been instructed to do so by the Data Controller in accordance with Article 29 of the Regulation, will process the User's data exclusively for the purposes indicated in this information notice and in compliance with the provisions of the Applicable Regulations.

Users' personal data may also be disclosed to third parties who may process personal data on behalf of the Controller in their capacity as " External Data Processors ", such as, by way of example, providers of IT and logistical services functional to the operation of the Site, providers of outsourcing or cloud computing services, professionals and consultants.

Users have the right to obtain a list of any data processors appointed by the Controller by making a request to the Controller in the manner indicated in paragraph 6 below.

In addition, Users' personal data may be disclosed by the Controller to the extent that this is necessary to perform contractual obligations and/or to comply with legal requirements, to autonomous third-party data controllerssuch as notaries and chamber of commerce officials in charge of identifying the winners of the prize competition organised on the Site, the Ministry of Economic Development, as well as the third parties indicated in the prize competition regulations, to which the data must necessarily be communicated in order to allow the User to benefit from any prizes won (e.g. travel agencies, ticket offices, hotels, etc.).

Rights of Interested Parties

Users may exercise the rights guaranteed to them by the Applicable Legislation by contacting the Controller in the following ways:

By sending a registered letter with return receipt to the registered office of the Holder: De Nieuwe Erven 3, 5431NV Cuijk, The Netherlands;
By sending an e-mail message to [email protected]
mWeb Online - De Nieuwe Erven 3, 5431NV Cuijk, The Netherlands

Pursuant to the Applicable Legislation, the Data Controller informs Users that they have the right to obtain information on (i) the origin of personal data; (ii) the purposes and methods of processing; (iii) the logic applied in the event of processing carried out with the aid of electronic instruments; (iv) the identification details of the data controller and data processors; (v) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of such data in their capacity as data processors or persons in charge of processing.

Furthermore, Users have the right to obtain:

access, updating, the rectification that is, when they have an interest in it, integration of data;
the cancellation , the transformation into anonymous form or the block data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c.certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared with the right protected.

In addition, Users have:

the right to withdraw consent at any time, if the processing is based on their consent (it should be noted that such revocation does not affect the lawfulness of the processing based on the consent before revocation);
the right to data portability (the right to receive all personal data concerning them in a structured, commonly used and machine-readable format), the right to limitation of processing of personal data and the right to cancellation ('right to be forgotten');
the right to object:

- in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection;
- in whole or in part, to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;
- where personal data are processed for direct marketing purposes, at any time, to the processing of their data carried out for that purpose, including profiling insofar as it is related to such direct marketing.
if they consider that processing concerning them infringes the Regulation, the right to lodge a complaint with a supervisory authority (in the Member State where they habitually reside, in the Member State where they work or in the Member State where the alleged infringement occurred). The Italian control authority is the Data Protection Authority , with headquarters at Piazza Venezia 11, 00187, Rome (http://www.garanteprivacy.it/).

The Owner is not responsible for updating all links displayed in this Policy, therefore whenever a link is not working and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by that link.